CVE-2017-5075

CVE-2017-5075 describes an inappropriate implementation in Content Security Policy (CSP) reporting within Google Chrome's Blink engine, affecting versions prior to 59.0.3071.86 on Linux, Windows, and Mac, and 59.0.3071.92 on Android. This vulnerability allowed a remote attacker to obtain URL fragment values through a crafted HTML page. With a CVSS score of 4.3 (Medium), this vulnerability has a low impact on confidentiality and requires user interaction (UI:R) for exploitation, but has low attack complexity (AC:L) and no authentication required (PR:N). The potential impact is limited to information disclosure (C:L) without affecting integrity or availability. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage are minimal, indicating low public attention to this specific vulnerability.